Platform Engineer – Security Operations (m/w/d)
Core
Build, operate, and evolve SOC platform infrastructure and security strategies for client environments.
Role type
Platform Engineer – Security Operations
Builds
SOC platform infrastructure, SIEM integrations, automated response playbooks, and detection rules for enterprise clients.
Domain
Cybersecurity, Security Operations Center (SOC), SIEM, SOAR
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
SIEM administration, Log integration and normalization, SOAR development, Detection Engineering, Automation playbooks, Threat Intelligence integration
Preferred skills
Experience with Palo Alto XSIAM, Cloud security tools, Active Directory, EDR, Firewall log sources
Technologies
SIEM platforms, SOAR tools (e.g., Palo Alto XSIAM), Log sources (Firewall, EDR, AD, Cloud)
Responsibilities
Own SOC platform infrastructure setup and continuous development; Integrate log sources into SIEM and ensure event processing; Implement detection rules based on analyst team requirements; Develop and maintain automated enrichment and response playbooks; Create and maintain operational handbooks for the platform.
Seniority
Mid-Senior, hands-on IC